spring-security

Commit Graph

Author	SHA1	Message	Date
Josh Cummings	df7a7cdc99	Update Test for Method Security Issue gh-17936	4 months ago
Josh Cummings	e66c498d80	Redirect to Appropriate Entry Point Based on Missing Authorities Issue gh-17934	4 months ago
Josh Cummings	fe17f2904d	Initial Exception Handling This commit hardcodes factors as a proof of concept for multi-factor authentication Issue gh-17934	4 months ago
Rob Winch	549569ea55	Add DefaultAuthorizationManagerFactory.additionalAuthorization	4 months ago
Rob Winch	1608465a38	DefaultAuthorizationManagerFactory additionalAuthorization This commit adds AuthorizationManager<T> additionalAuthorization to DefaultAuthorizationManagerFactory which can be used for multi factor authorization. There is a builder that allows for creating an instance that requires static additional authorities, but for more advanced cases users can inject an additionalAuthorization that looks up if the user has settings that enable additional required authorities. The builder can later be updated to support checking that a particular authority was granted within a specified amount of time. Issue gh-17900	4 months ago
Rob Winch	459b872a20	Cleanup Kotlin AuthorizationManagerFactory Generics This cleans up the generic types within the Kotlin DSL that reference AuthorizationManagerFactory Issue gh-17860	4 months ago
Josh Cummings	628f3da30b	Revert "Add AuthorityUtils Methods" This reverts commit `50bdaeb100` that was accidentally committed	4 months ago
Josh Cummings	5ca5aca48e	Add Null Guard Issue gh-17933	4 months ago
Josh Cummings	c61f53ad64	Copy Query to Parameters Issue gh-17450	4 months ago
Josh Cummings	50bdaeb100	Add AuthorityUtils Methods This commit adds a couple of utility methods for working with authorities by type. Now that there are infrastructural authorities that Spring Secuirty works with directly, it's helpful to be able to filter them out of the authority list.	4 months ago
Rob Winch	b31fdcd89f	Merge branch '6.5.x'	4 months ago
Rob Winch	1878a1e03b	Merge branch '6.4.x' into 6.5.x	4 months ago
Rob Winch	f0f57ad560	Bump org.assertj:assertj-core from 3.27.4 to 3.27.5	4 months ago
Rob Winch	93ded52236	Bump org.gretty:gretty from 4.1.7 to 4.1.10	4 months ago
Rob Winch	329af112ed	Bump com.webauthn4j:webauthn4j-core from 0.29.5.RELEASE to 0.29.6.RELEASE	4 months ago
Rob Winch	3f1a60b0b8	Bump com.google.code.gson:gson from 2.13.1 to 2.13.2	4 months ago
Rob Winch	67373e8c13	Bump org.assertj:assertj-core from 3.27.4 to 3.27.5	4 months ago
Rob Winch	4ef16b14d2	Update terminology to HTTP Service Clients Closes gh-17947	4 months ago
dependabot[bot]	7d93186c69	Bump org.gretty:gretty from 4.1.7 to 4.1.10 Bumps [org.gretty:gretty](https://github.com/gretty-gradle-plugin/gretty) from 4.1.7 to 4.1.10. - [Release notes](https://github.com/gretty-gradle-plugin/gretty/releases) - [Changelog](https://github.com/gretty-gradle-plugin/gretty/blob/master/changes.md) - [Commits](https://github.com/gretty-gradle-plugin/gretty/compare/v4.1.7...v4.1.10) --- updated-dependencies: - dependency-name: org.gretty:gretty dependency-version: 4.1.10 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	4 months ago
dependabot[bot]	ae4b2e50e2	Bump org.gretty:gretty from 4.1.7 to 4.1.10 Bumps [org.gretty:gretty](https://github.com/gretty-gradle-plugin/gretty) from 4.1.7 to 4.1.10. - [Release notes](https://github.com/gretty-gradle-plugin/gretty/releases) - [Changelog](https://github.com/gretty-gradle-plugin/gretty/blob/master/changes.md) - [Commits](https://github.com/gretty-gradle-plugin/gretty/compare/v4.1.7...v4.1.10) --- updated-dependencies: - dependency-name: org.gretty:gretty dependency-version: 4.1.10 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	4 months ago
dependabot[bot]	e323377768	Bump org.gretty:gretty from 4.1.7 to 4.1.10 Bumps [org.gretty:gretty](https://github.com/gretty-gradle-plugin/gretty) from 4.1.7 to 4.1.10. - [Release notes](https://github.com/gretty-gradle-plugin/gretty/releases) - [Changelog](https://github.com/gretty-gradle-plugin/gretty/blob/master/changes.md) - [Commits](https://github.com/gretty-gradle-plugin/gretty/compare/v4.1.7...v4.1.10) --- updated-dependencies: - dependency-name: org.gretty:gretty dependency-version: 4.1.10 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	4 months ago
Andrey Litvitski	68742e170c	Support Automatically Checking for Required Authorities in Authorization Rules Closes: gh-17900 Signed-off-by: Andrey Litvitski <andrey1010102008@gmail.com>	4 months ago
Josh Cummings	a63e87d8fb	Remove Static Mock These can cause infinite loops when running tests in an IDE.	4 months ago
Rob Winch	229c7bca5b	Add AuthorizationManagerFactory in Kotlin DSL Closes gh-17860	4 months ago
Josh Cummings	765bdf1ed0	SpEL Expressions Support Returning AuthorizationManager Closes gh-17936	4 months ago
Josh Cummings	25e413127c	Merge branch 'authentication-factors' Closes gh-17933	4 months ago
Josh Cummings	1e1cb0097a	Document Authentication Factors Issue gh-17933	4 months ago
Josh Cummings	6e7a181eac	Polish Authentication Factors Issue gh-17933	4 months ago
Josh Cummings	758b35df9c	Add Factor Tests for Authentication Providers Issue gh-17933	4 months ago
Josh Cummings	39e2bb67fc	Create Authentication Only Once Issue gh-17933	4 months ago
Josh Cummings	0f4e1f2a2a	Move FACTOR_X509 into PreAuthenticatedAuthenticationProvider Issue gh-17933	4 months ago
Josh Cummings	e8accd0499	Add Factory Authority When Authentication Succeeds Issue gh-17933	4 months ago
Rob Winch	9eaadcc70d	Add hasAll(Roles\|Authorities) to SecurityExpressionRoot This adds support for hasAllRoles and hasAllAuthorities to method security expressions. Issue gh-17932	4 months ago
dependabot[bot]	a3b2ebff6e	Bump org.assertj:assertj-core from 3.27.4 to 3.27.5 Bumps [org.assertj:assertj-core](https://github.com/assertj/assertj) from 3.27.4 to 3.27.5. - [Release notes](https://github.com/assertj/assertj/releases) - [Commits](https://github.com/assertj/assertj/compare/assertj-build-3.27.4...assertj-build-3.27.5) --- updated-dependencies: - dependency-name: org.assertj:assertj-core dependency-version: 3.27.5 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	4 months ago
dependabot[bot]	476e5c5a3a	Bump org.assertj:assertj-core from 3.27.4 to 3.27.5 Bumps [org.assertj:assertj-core](https://github.com/assertj/assertj) from 3.27.4 to 3.27.5. - [Release notes](https://github.com/assertj/assertj/releases) - [Commits](https://github.com/assertj/assertj/compare/assertj-build-3.27.4...assertj-build-3.27.5) --- updated-dependencies: - dependency-name: org.assertj:assertj-core dependency-version: 3.27.5 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	4 months ago
Rob Winch	bce8049815	Web uses AuthorizationManager<? super RequestAuthorizationContext> This allows AuthorizationManager<Object> to be used instead of just AuthorizationManager<RequestAuthorizationContext>. In addition, the code was updated to use `AuthorizationManagerFactory<? super RequestAuthorizationContext>` Closes gh-17931	4 months ago
Rob Winch	675835e525	Add AuthorizationManagerFactory.hasAll(Authorities\|Roles) Closes gh-17932	4 months ago
dependabot[bot]	0da79925cd	Bump com.google.code.gson:gson from 2.13.1 to 2.13.2 Bumps [com.google.code.gson:gson](https://github.com/google/gson) from 2.13.1 to 2.13.2. - [Release notes](https://github.com/google/gson/releases) - [Changelog](https://github.com/google/gson/blob/main/CHANGELOG.md) - [Commits](https://github.com/google/gson/compare/gson-parent-2.13.1...gson-parent-2.13.2) --- updated-dependencies: - dependency-name: com.google.code.gson:gson dependency-version: 2.13.2 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	5 months ago
dependabot[bot]	c001a57ac6	Bump com.webauthn4j:webauthn4j-core Bumps [com.webauthn4j:webauthn4j-core](https://github.com/webauthn4j/webauthn4j) from 0.29.5.RELEASE to 0.29.6.RELEASE. - [Release notes](https://github.com/webauthn4j/webauthn4j/releases) - [Changelog](https://github.com/webauthn4j/webauthn4j/blob/master/github-release-notes-generator.yml) - [Commits](https://github.com/webauthn4j/webauthn4j/compare/0.29.5.RELEASE...0.29.6.RELEASE) --- updated-dependencies: - dependency-name: com.webauthn4j:webauthn4j-core dependency-version: 0.29.6.RELEASE dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	5 months ago
github-actions[bot]	b007219055	Next development version	5 months ago
github-actions[bot]	c43f1f85ef	Release 6.4.11	5 months ago
github-actions[bot]	2abde7da16	Next development version	5 months ago
github-actions[bot]	096ce047c4	Release 6.5.5	5 months ago
Rob Winch	ebc391cb97	Merge branch '6.5.x'	5 months ago
Rob Winch	c5d48fe3a9	Bump io.micrometer:micrometer-observation from 1.14.10 to 1.14.11	5 months ago
Rob Winch	22a9300003	Bump jakarta.xml.bind:jakarta.xml.bind-api from 4.0.2 to 4.0.4	5 months ago
Rob Winch	44c8a1ec27	Bump org.hibernate.orm:hibernate-core from 6.6.26.Final to 6.6.29.Final	5 months ago
Rob Winch	ed00ddabf6	Bump org.springframework.data:spring-data-bom from 2024.1.8 to 2024.1.10	5 months ago
Rob Winch	a8c642370b	Bump org.springframework:spring-framework-bom from 6.2.10 to 6.2.11	5 months ago
Rob Winch	226494f2c1	Merge branch '6.5.x'	5 months ago

1 2 3 4 5 ...

19560 Commits (df7a7cdc99aae8b73fc92357e80ea015f60d472b) All Branches Search

19560 Commits (df7a7cdc99aae8b73fc92357e80ea015f60d472b)

All Branches